Comment by ylk
5 days ago
This is not accurate. The very first sentence of that issue is:
> Passkeys should never be allowed to be exported in clear text.
and from another comment by the issue creator:
> I don't quite understand why requiring file protection/encryption can't be a temporary minimum bar here.
They're arguing for storing them in encrypted form. That's very much a different argument than arguing against exporting. I'm not taking any sides here, I just think it's bad to so badly misrepresent people's standpoints.
The kdbx format is encrypted on-disk. You need a password to decrypt the database.
That isn't what is being discussed by the issue. The issue was pertaining to an unencrypted export.
>That isn't what is being discussed by the issue. The issue was pertaining to an unencrypted export.
Such security, very rules, wow.
Because an ZIP file with the encrypted key and the password to it in plain text is sooooo much more secure (but it doesn't break the rules, right?).